This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: RMv74WkcfjM/TgTp2FORD338ZbXwbx4p/YEKHRYXROI= Subject key identifier: 26:10:E0:60:4F:B5:50:22:C1:91:63:57:19:83:20:DA:D3:34:77:CA Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 5CE8B04A5D3445C3B786303ED2813E7E4C4F347E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01A5 Signing time: Mon 01 Dec 2025 04:32:01 +0000 Manifest this update: Mon 01 Dec 2025 04:27:01 +0000 Manifest next update: Thu 04 Dec 2025 15:17:01 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) 2: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: eO8/VMn+LOUeUKNaA2i7uvg2gfOe9d6gKZ2kywlYKSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:b0:4a:5d:34:45:c3:b7:86:30:3e:d2:81:3e:7e:4c:4f:34:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Dec 1 04:27:01 2025 GMT Not After : Dec 4 15:17:01 2025 GMT Subject: CN=2610E0604FB55022C1916357198320DAD33477CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:a9:8f:7d:45:68:15:92:57:a4:58:97:69: e2:f5:58:aa:a5:31:14:a6:74:a5:f0:b0:7c:65:cb: d0:78:9c:d0:23:c3:f9:e6:aa:37:06:16:65:c8:51: 87:3e:33:f0:22:2a:d7:fd:73:62:57:0b:4d:8a:a9: ee:20:f9:4c:e6:53:f6:8b:34:1d:68:24:e3:f3:b4: 00:d5:c2:aa:13:a1:48:ff:ae:fd:ab:a4:1f:ee:8d: b4:4c:01:25:d9:30:c3:39:95:58:d8:ac:90:56:4c: b2:49:8f:84:e0:08:26:17:d7:79:8a:e7:9d:80:88: dc:fa:1d:27:07:1a:6d:03:17:0b:dd:ee:d4:46:5e: b2:9f:83:c9:7a:b8:b7:6a:48:ec:ff:f1:c3:5e:3b: c1:62:cb:c9:02:60:d5:20:7e:59:25:80:91:85:4d: d8:e6:03:47:fd:df:4f:d9:5a:57:1b:2d:2a:59:0a: 3f:36:ef:c4:65:eb:e5:86:ad:eb:68:d8:91:fd:6d: 0a:8a:28:49:89:62:0b:e6:f4:40:48:7a:20:ec:b2: 33:dc:38:b2:bc:12:e4:ec:32:e6:75:af:72:a0:8a: 75:ae:63:21:0c:5e:a7:6e:56:20:c6:00:4b:5b:9d: a0:56:3f:d3:42:59:3f:bf:43:d1:f6:0d:23:32:d3: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:10:E0:60:4F:B5:50:22:C1:91:63:57:19:83:20:DA:D3:34:77:CA X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b7:5a:cc:f8:51:a0:5e:c4:c7:37:d8:1e:6b:dd:c5:fe:81: 16:2a:39:02:4a:cd:ae:6f:a5:df:6f:08:f8:4a:e8:67:94:1a: b0:95:fe:74:74:7f:a2:16:75:f7:67:f0:38:79:32:a3:3c:4b: 4d:00:88:2d:0d:e7:5c:cf:0d:15:ce:4c:2c:93:c4:2d:ad:4f: 4b:24:3e:b7:9e:bf:9f:69:84:01:da:2e:d0:7e:ef:aa:eb:f0: cf:1c:96:cf:c0:31:a9:3b:0c:c2:ab:20:4c:ff:af:f7:fe:8c: ad:64:7a:38:57:16:7a:c6:4c:0c:76:e9:6e:75:6f:dc:52:40: 68:ef:de:2d:4f:62:4f:6e:80:33:ea:20:e8:95:54:6b:a1:61: f1:29:b2:ab:7e:c4:8f:5e:88:38:66:5d:f2:c2:b6:ee:be:3e: 9f:e4:cf:f3:09:e2:02:2f:ea:78:eb:3a:b3:fe:b4:53:45:e6: ef:b7:93:96:53:3c:27:f6:15:75:94:62:5b:5c:fa:fa:5b:45: f4:a7:21:64:23:84:c7:8e:7a:2a:37:26:fc:22:b0:80:57:4e: aa:4e:e4:a5:f0:ee:df:c2:dd:e6:d5:9c:cd:95:60:49:21:4f: 1b:f5:86:96:d2:1d:4f:d5:43:89:0f:66:1b:ad:44:6c:b2:a6: 02:34:8f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOiwSl00RcO3hjA+0oE+fkxPNH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTEyMDEwNDI3MDFaFw0yNTEyMDQxNTE3MDFaMDMxMTAvBgNV BAMTKDI2MTBFMDYwNEZCNTUwMjJDMTkxNjM1NzE5ODMyMERBRDMzNDc3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAqmPfUVoFZJXpFiXaeL1WKql MRSmdKXwsHxly9B4nNAjw/nmqjcGFmXIUYc+M/AiKtf9c2JXC02Kqe4g+UzmU/aL NB1oJOPztADVwqoToUj/rv2rpB/ujbRMASXZMMM5lVjYrJBWTLJJj4TgCCYX13mK 552AiNz6HScHGm0DFwvd7tRGXrKfg8l6uLdqSOz/8cNeO8Fiy8kCYNUgflklgJGF TdjmA0f930/ZWlcbLSpZCj8278Rl6+WGreto2JH9bQqKKEmJYgvm9EBIeiDssjPc OLK8EuTsMuZ1r3KginWuYyEMXqduViDGAEtbnaBWP9NCWT+/Q9H2DSMy01M1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJhDgYE+1UCLBkWNXGYMg2tM0d8owHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy3Wsz4UaBexMc32B5r3cX+gRYqOQJKza5v pd9vCPhK6GeUGrCV/nR0f6IWdfdn8Dh5MqM8S00AiC0N51zPDRXOTCyTxC2tT0sk Preev59phAHaLtB+76rr8M8cls/AMak7DMKrIEz/r/f+jK1kejhXFnrGTAx26W51 b9xSQGjv3i1PYk9ugDPqIOiVVGuhYfEpsqt+xI9eiDhmXfLCtu6+Pp/kz/MJ4gIv 6njrOrP+tFNF5u+3k5ZTPCf2FXWUYltc+vpbRfSnIWQjhMeOeio3JvwisIBXTqpO 5KXw7t/C3ebVnM2VYEkhTxv1hpbSHU/VQ4kPZhutRGyypgI0j/c= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client